chore: add lockfile validation

see: #16

Signed-off-by: Rifa Achrinza <[email protected]>

Author: achrinza

package-lock.json

@@ -51,6 +51,7 @@
     "eslint-plugin-prettier": "^4.0.0",
     "glob": "^7.2.0",
     "husky": "^7.0.4",
+    "lockfile-lint": "^4.7.3",
     "secvisogram": "file:./vendors/secvisogram/app",
     "semver": "^7.3.5",
     "ts-node": "^10.5.0"

package.json

@@ -0,0 +1,19 @@
+#!/bin/sh
+# SPDX-FileCopyrightHeader: LoopBack Contributors
+# SPDX-License-Identifier: MIT
+
+set -eu
+export POSIXLY_CORRECT=1
+
+SCRIPT_PATH="$(dirname $0)"
+REPO_PATH="$SCRIPT_PATH/../../"
+
+find "$REPO_PATH" \
+    -name package-lock.json \
+    -type f \
+    -exec \
+        npx --no-install \
+            lockfile-lint \
+                --allowed-hosts=npm \
+                --allowed-schemes=https: file: \
+                --path='{}' \;